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Flexible host system for storage media 



PCT/IB03/02574 



The invention relates to systems for protection of content stored on removable 
storage media such as optical carriers. 

5 The principle of achieving flexibility through downloadable control software 

has previously been used in the field of secure rendering. Such a system is known from Bart 
J. van Rijnsoever, Peter Lenoir and Jean-Paul M.G. Linnartz, "Interoperable protection for 
digital multimedia content", IEEE Intemational Multimedia Conference and Exhibit, New 
York, 2000. 

10 With the current transition from analog to digital platforms for home 

entertainment, protection of audio and video against illegal copying is becoming a major 
issue. Technological advances in storage media (such as CD and DVD discs, m particular the 
recordables or rewritables), networking (the ubiquitous Internet and digital television) and 
compression (in particular MPS audio, and MPEG 4 video) not only offer tremendous 

1 5 opportunities for new business models, they also are a threat to the existing businesses of 
music and film distribution. 

Many distal television broadcasters sell fheir content under the control of a 
conditional access (CA) system. These systems encrypt an MPEG-2 signal before 
transmission and send decryption keys to the digital TV terminals (set-top boxes or integrated 

20 TV sets) of paying end-users. The terminals decrypt the signal and ramage cryptographic 
keys and contmt access rights. 

OPIMA (Open Platform Initiative for Multimedia Access) is a specification 
that enables interoperability between content protection systems and multimedia terminals. 
OPIMA is not restricted to digital TV and mcludes for example delivery of music through the 

25 Internet Its goal is to create an open market fiar content delivery. In digital TV and other 

application areas, content protection systems tend to prevent the development of a horizontal 
market in which the end-user can use his or her multimedia terminal to access the content 
offerings of all service providers. Traditionally a terminal siq)ports only one content 
protection system which severely limits the number of services that can be accessed. 
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According to OPIMA a generic multimedia temoinal is instantiated for a 
specific Litellectual Property Management and Protection (IPMP) system by downloading a 
corresponding software module or by inserting a corresponding hardware module. The 
module inq>lements all functions that di&er between different IPMP systems. An OPIMA 

5 Virtual Machine (OVM) guarantees the security of the IPMP plug-ins. These plug-ins 

embody content access lights and the idraitity of the end-user, so they must be protected from 
attacks by for example the end-user. How the OVM imgplements this protection is not defined 
by OPIMA4 it is left as a task for an {q)plication domain that adopts OPIMA. 

The OVM implements two application programming interfaces (APIs). The 

10 Application Services API enables the use of OPIMA by independent applications. Using this 
API, an application like for example a software player may request access to a specific 
content item identified by a URL. 

The IPMP Services API allows downloaded PMP plug-ins (or, modules) to 
access the functionality of the multimedia terminal. The IPMP plug-in implements all 

1 5 functionality that is specific for a specific IPMP system in an application domain. Functions 
that are common m an appHcation domain (such as transmission and possibly also content 
decryption) are implemented by tbs OVM. The OVM also executes most of the rendering, to 
ensure that the compressed digital content is not available to hackers on an unprotected 
inter&ce. 

20 While the OPIMA syston allows a certain amount of flexibiUty compared to 

traditional content protection systems, it suffers &om several disadvantages. For one tiling, 
the system requires a communication channel over which the IPMP plug-ins can be 
downloaded. This channel must be secured and authenticated, so that an attacker cannot 
manipulate the plug-m as it is bemg downloaded (e.g. insert a virus or replace code in the 

25 plug-in which allows the attacker to make unauthorized copies of the protected content). A 
return channel is also necessary to request the IPMP plug-ins. 

Further, the plug-ins are typically implemented in the Java language, and 
executed as applets by the OVM. Every cont^it supplier must thus program his own IPMP 
plug-in with all the necessary fimctionaUty. The OPIMA standard defines a generic API for 

30 both application services and IPMP services, but an OVM provides no implementation for 
the functions in this API. This means a lot of duplicated efforts on the part of content 
suppliers, and it opens \jp all kinds of security risks as modules are released without adequate 
scrutiny. It is voy hard to correctly unplement a security system, and so it is to be expected 
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that many bugs will be found in these implementations, making the entire syston seem 
untrustworfliy. 

The inventor has realized tiiiat a similar technical mechanism can also serve a 
different purpose. Instead of creating a flexible environment for devices that deliver content 
5 to the user (such as television sets, mobile phones, PCs in their fiinction of showing content 
on the screen), a flexible solution can be achieved for storage and retrieval of content from 
media such as optical discs. 

The inventor has realized that yet another disadvantage is that in the current 
mindset of OPMA the IPMP plug-in and the content are delivered over two-way networks 
10 supporting authentication. The latter can for instance protect the plug-in against replay 
attacks. This makes it difGcult to store content and the rights associated with it. 

It is an object of the invention to provide a system according to the preamble, 
1 5 which provides similar flexibility as prior art systems, but which is more suitable for secure 
storage of content. Another object of the invention is to give the content owner the freedom 
to use the appropriate selection of these functions, in a manner that can be defined by control 
logic. 

These and other objects are achieved according to the invention in a system 
20 comprising read means for reading content data and control logic data finm a storage 
medium, the control logic data being uniquely linked to the storage medium, processing 
means, coupled to the read means, for processing the content data and feeding the processed 
content data to an output, and control means, coupled to the read means, for executing the 
control logic data and for controlling the processing means in accordance with fiie control 
25 logic data being executed. 

The benefits of this architecture are substantial. On the one hand, the 
processing means can be implemented in a standardized foshioiL This reduces the risk of 
programming and/or security errors in these means, and provides a fixed basic architecture 
and functionality for the syst^ On the oflier hand, by simply writing new control logic data 
30 and storing it on a storage medium Unked to llie storage medium together wifli content data, 
the system can be caused to operate in an entirely new way. 

As the control logic data is uniquely linked to the storage medium, the system 
does not require secure channels for downloading plug-ins, and it is more secure against bit- 
by-bit copying of the contents of the storage medimn. 
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In prior art secure storage systems, a number of functions can be executed by 
the device that holds the storage medium itself. This functions can include decryption, re- 
encryption, watermark detection, remarking with a new watermarks, reading out unique 
identifiers on the disc, reading out and executing revocation messages, comparing the disc 
5 type with the content (to prevent playback of professional content intended for pressed 
media, illegally copied to recordabale media), and so on. The invention now provides for a 
system in which the content owner has the freedom to use the q>propriate selection of these 
functions, in a manner that can be freely defined by the control logic data. 

Id an embodiment the read means are arranged for reading out variations in a 
10 physical parameter of the storage medium, said variations exhibiting a modulation pattern 
representing a necessary parameter for obtaining access to tiie control logic data. In this 
embodiment the link between control logic data and storage medium is established by 
requiring the use of the necessary parameter, which is physically part of the storage medium 
itself and camot be copied to another storage medium, in order to access the control logic 
1 5 data. The necessary parameter is encoded on the storage medium by introducing variations in 
a physical parameter of the storage medium, said variations exhibiting a modulation pattern 
representing the necessary parameter. 

Such a physical parameter of a storage medium is sometimes referred to as a 
"wobble" on the storage medium. Reference is made to US patent 5,724,327 (attorney docket 
20 PHN 13922) to Hbe same assignee as the present invention which describes various 
techniques to create such a "wobble" and to store information in it. 

In a further embodiment the control logic data is stored encrypted on the 
storage medium, and the necessary parameter comprises a decryption key necessary to 
decrypt the encrypted control logic data. This is a very simple yet effective technique for 
25 requiring the use of the necessary parameter in order to access the control logic data. Without 
the parameter, the control logic data cannot be recovered. And since the parameter cannot be 
copied, the control logic data is necessarily linked to the storage medium. 

In a fiirther embodiment the necessary parameter comprises authentication 
data for the control logic data, and the control means are arranged for verifying the 
30 authenticity of the control logic data using the authentication data before executing the 
control logic data. An alternative to encrypting the control logic data is to simply store 
authentication data on the storage medium. If a copy of the storage medium is made, the 
auflientication data cannot be copied, and so authentication of the copy will fail. 
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In a further embodiment the storage medium comprises an integrated circuit 
which contains a necessary parameter for obtaining access to the control logic data, and the 
read means are arranged for reading out the necessary parameter £rom the integrated circuit. 
This integrated circuit is sometimes referred to as a "Chip in disc". Since every storage 
medium has its own integrated circuit, it is not possible to make a copy of the storage 
medium with the same information in the integrated circuit The information from the 
integrated circuit can then be used to enforce the link between the control logic data and the 
storage medium. 

In a furthra: embodiment the read means are further arranged for storing a 
value of an additional parameter on the integrated circuit. This allows the system to keep 
track of, for example, a usage limit to be enforced on access to the content data. The 
additional parameter could then comprise a counter, which is read out before every access, 
decreased by one and stored again. If the counter reaches zero, the system refuses access to 
the content data. The additional parameter could of course also be used for other purposes. 

It is a further object of the invention to provide a storage medium comprising 
content data and control logic data, the control logic data being uniquely linked to the storage 
medium. This storage medium preferably comprises an optical storage medium. 

In an onbodiment the storage medium comprises an integrated circuit which 
contains a necessary parameter for obtaining access to the control logic data. 

In a further embodiment the storage medium exhibits variations in a physical 
parameter of the storage medium, said variations exhibiting a modulation pattern representing 
a necessary parameter for obtaining access to the control logic data. 



These and other aspects of the invention wiU be apparent from and elucidated 
witii reference to the embodiments shown in the drawings, in which: 

Fig. 1 schematically shows a system comprising a storage medium and a host 
apparatus in accordance with the invention; and 

Fig. 2 schematically shows an embodiment of the storage medium, comprising 
an integrated circuit, in more detail. 



Throughout the figures, same reference numerals indicate similar or 
corresponding features. Some of the features indicated in the drawings are typically 
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implemented in software, and as such represent software entities, such as software modules 
or objects. 

Fig. 1 schematically shows a system 100 comprising a storage medium 101 
and a host apparatus 1 10 in accordance wift the invention. The host apparatus llOcomprises 

5 a rec^tacle 1 1 1 in which a user can place the storage medium 101, a read module 1 12 for 
reading content data and control logic data from the storage medium 101, various processing 
means 113-117 for processing the content data and feeding the processed content data to an 
output 119, and a user input module 118 using which the user can control operation of the 
host apparatus 110. The host qiparatus also comprises a control module 120, whose workings 

10 are discussed below. 

In Fig. 1, the host apparatus 1 10 is embodied as an optical disk drive, for 
example a Compact Disc (CD) or Digital Versatile Disc (DVD) reader. The apparatus 1 10 
could however also easily be embodied as a floppy disc drive or as a reader for storage media 
such as removable hard disks, smart cards, flash memories and so on. The system 100 of 

15 which the host apparatus 1 10 is a part can be for instance a Compact Disc player, a personal 
computer, a television or radio system, and so on. 

It will be xmderstood that the system 100 can interoperate with a secure 
rendering system built according to OPMA-like principles. In such an embodiment the 
secure flexible host ^paratus 1 10 can establish a two-way communication session with the 

20 OPMAOVM and deliver an IPMP system. 

After the user places the storage medium 101 in the receptacle 111, the read 
module 1 12 is activated. This activation can be automatic or be in response to a user 
activation of the user input module 118, for example by pressing a button. In accordance with 
the present invention, the read module 1 12 reads the control logic data fiom the storage 

25 medium 101 and feeds the control logic data to the control module 120. 

The control module 120 receives the control logic data and attempts to 
establish that the control logic data is authentic and is correctly linked to the storage medium 
101. If this authenticity cannot be established, the control module 120 indicates an error 
status, for example by supplying an enxir signal to the output 1 19 or by activating a LED on 

30 the front panel of the host apparatus 110. 

One way to establish the unique link between control logic data and storage 
medium is to require the use of a necessary parameter, which is physically part of the storage 
medium itself and cannot be copied to another storage medium, in order to access the control 
logic data. The necessary parameter is encoded on the storage medium by introducing 
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variations in a physical parameter of the storage medium, said variations exhibiting a 
modulation pattern representing the necessary parameter. Such a physical parameter of a 
storage medium is sometimes referred to as a "wobble" on the storage medium. Reference is 
made to US patent 5,724,327 (attomey docket PHN 13922) to the same assignee as the 
5 present invention which describes various techniques to create such a "wobble" and to store 
infonnationinit. 

Preferably the storage medium 101 now is a record carrier of an optical 
readable type in which the information has been recorded thereon as a pattern of optically 
detectable marks alternating with intermediate areas arranged along said track thereof. These 
10 variations preferably are variations m the track position in a direction transverse to the track 
direction. 

In another embodiment said record carrier, having information marks along a 
track thereof, exhibits jSrst variations caused by existence and non-existence of the 
infoimation marks along the track, which first variations represent an information signal 

1 5 recorded on the record carrier, and second variations caused by variations associated with the 
track, which second variations exhibit a modulation pattern representing a code. 

An alternative approach to encode information in a physical parameter of the 
storage medium uses a modulated pregroove, as described in US 5,901,123 to Pioneer and 
US 6,075,761 to Sony and Pioneer. Other approaches are of course also possible. 

20 The read module 1 12 now reads out these variations in a physical parameter of 

ths storage medimn, and reconstructs the modulation pattern representing the necessary 
parameter. This parameter is then siqyplied to the control module 120. 

Jn. a first embodiment, the control logic data is stored encrypted on &e storage 
medium, and the necessary parameter comprises a decryption key necessary to decrypt the 

25 encrypted control logic data. Without the parameter, the control logic data cannot be 

recovered. And since the parameter cannot be copied, the control logic data is necessarily 
linked to the storage medium 101. As an additional security measure, part of the necessary 
decryption key could be installed beforehand in the host apparatus 100. The host apparatus 
110 combines this part with the decryption information comprised in the necessary parameter 

30 to obtain the complete decryption key allowing decryption of the encrypted control logic 

In a second embodiment the necessary parameter comprises authentication 
data for the control logic data. The control module 120 now verifies the authenticity of the 
control logic data using the authentication data before executing the control logic data. 
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The authentication data may be larger than the amount of data that can be 
encoded as variations in a physical parameter of ttie storage medium, hi this case the 
authentication data can be written on the storage meditmi in a data area, for example in a 
sector normally used for storing the content data. A cryptographic simmiary of the 
5 authentication data is computed and encoded as variations in the physical parameter. Since 
the summary, for example obtained using the MDS cryptographic hash function, will be 
shorter, this summary can be encoded in this way. This option is discussed in more detail in 
international patent application WO 01/95327 (attomey docket PHNL000303). The necessary 
parameter now constitutes the cryptographic summary of the authentication data. 
1 0 Another way to estabhsh flie unique link between control logic data and 

storage medium is to use a "Chip In E>isc" (CID) approach. This approach is described in, for 
example, international patent application WO 02/17316 (attomey docket PHNL010233) by 
the same applicant as the present appUcation. This is illustrated in Fig. 2. The storage 
medium 101, here an optical record carrier like a Compact Disc or DVD, is equipped with an 
15 integrated circuit 201, sometimes also called a chip. This integrated circuit comprises means 
202 for sending information stored in the circuit to the host apparatus. The chip may be 
powered using a photodiode 203 to which an extemal power signal is supplied, althougji 
conceivably a battery or other power source could be used. 

The information stored m the chip may need to be protected, so that 
20 unauthorized devices catmot gain access to it. For exan:q)le, the information may comprise a 
content decryption key that should only be suppUed to playback devices that conform to a 
certain Digital Rights Management (DRM) standard. The chip therefore preferably tries to 
authenticate the host ^aratus before sending the stored information to the host apparatus. A 
low-power authentication method tiiat is well-suited for CID-type plications is described in 
25 European patent application serial number 02075983.3 (attomey docket PHNL020192) by 
the same applicant as the present application. 

Hie information fixtm the integrated circuit can be used to enforce the link 
between the control logic data and the storage medium similar to the ^bodiments using a 
"wobble": the information comprises a necessary parameter for obtaining access to the 
30 control logic data. For example, the information may comprise a decryption key, or comprise 
authentication data. 

In a further embodiment the read module 1 1 1 is fiirther arranged for storing a 
value of an additional parameter on the integrated circuit 201. The integrated circuit 201 to 
this end comprises a corresponding rewritable storage component 204. This allows the 
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system 100 to keqp track of, for example, a usage limit to be enforced on access to the 
content data. The additional parameter could then comprise a coimter, which is read out 
before ev^ access, decreased by one and stored again. If the counter reaches zero, the 
system refuses access to the content data. The additional parameter could of course also be 

S used for other purposes. For example, it could be used to hold state information. 

In a further embodiment the read module 1 1 1 is further arranged for storing a 
value of an additional parameter elsewhere on fixe storage medium 101. For instance, the 
storage medium 101 may comprise a rewritable Digital Versatile Disc or compact disc. This 
also allows the systan 100 to keqp track of, for example, a usage Umit, state information or 

10 other information. 

The read module 111 may be arranged to rewrite all or part of the control logic 
data as it is stored on the storage medium 101. This also allows the system 100 to keep track 
of, for example, a usage limit, state information or other information. The usage limit now 
can be implemented simply by assigning it to a variable in the control logic data. The read 

1 5 module 1 11 can then decrease the usage limit by sunply rewriting the assignment statement 
in the control logic data as it is stored on the storage medium. Alternatively, tiie read module 
1 1 1 can modify the control logic data as it is bemg held in working memory of the host 
apparatus 110 and then simply replace the control logic data on tiie stor^e medium with the 
modified control logic data. 

20 If the control logic data is modified, this may cause the unique link between 

control logic data and storage medium to be broken. For instance, if authentication data is 
stored in the integrated circuit 201 or as variations in a physical parameter of the storage 
medium, modifications to the control logic data will cause the resulting control logic data to 
no longer match the authentication data. In case the authentication data is stored in the 

25 integrated circuit 201 , it may be possible to update this authentication data to reflect the 
change. 

However, if the authentication data is stored as variations in a physical 
parameter of the storage medium, it is not possible to change the variations. An option that 
overcomes this problem is to store the authentication data on the storage medium 101 in a 
30 rewritable area in encrypted form. A decryption key necessary to decrypt the authentication 
data is then stored as variations in the physical parameter of the storage medium. The read 
module 111 can now read out this decryption key and use it to decrypt the authentication 
data. 
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After having written the modified control logic data to the storage medium 
101, ttie read module 111 computes the new authentication data (for example, a aryptograpic 
sununary of the modified control logic data), encrypts it using the appropriate key and writes 
the result to the storage medium 101. 

If decryption of the control logic data was successful, and/or authentication of 
ike control logic data was successful, the control module 120 proceeds with executing the 
control logic data. In the host q>paratus 1 10 the control module 120 controls Hoe operations of 
the processing means 113-117. The control module 120 itselfoperates in accordance with the 
control logic data that is being executed. 

The control logic data is not just a password or decryption key necessary to 
gain access to the content data. Rather, it conqnises executable code or instructions that are 
to be carried out by the control module 120. These instructions can be provided in a high- 
level language, for example an interpreted scripting language such as Python or Tcl/Tk, or in 
a lower level language such as Java bytecode. Of course the instructions themselves may 
comprise parameters such as a decryption key or a seed for certain operations to be carried 
out by the processing means. 

The first step in content processing usually will be that the control module 120 
activates the read module 112. The read module 112 now reads the content data from the 
storage medium 101 and feeds it to the processing means 1 13-1 17. The ou^ut of the 
processing means 113-117 goes to the output 119, from which the content can be read by 
other components of the system 100 (e.g. by rendering it as a movie, or generating audio 
signals to be rendered on loudspeakers). It may be desirable to first let the host apparatus 110 
establish that it is installed in a compliant system 100. This is especially important when the 
ou^ut 1 19 is a digital output. If the compliance of the system 100 cannot be established, no 
content should be presented on the output 119. 

The host {apparatus 1 10 can be equipped with a great variety of processing 
means. In the exemplary embodiment of Fig. 1, the processing means comprise a decryption 
module 1 13, a watermark detection module 1 14, a conditional access module 1 IS, a signal 
processing module 116, and a bus encryption module 1 17. 

First, the content as it is read from the storage medium 101 is decrypted by tiie 
decryption module 1 13 under the control of the control logic data as it is being executed by 
the control module 120. As part of this control, the control module 120 may supply a 
decryption key to the decryption module 1 13, or it may direct the decryption module 1 13 on 
how to obtain this decryption key. For exanqple, the decryption key could be stored in an 
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integrated circuit contained on ihe storage medium 101, or on a designated location on the 
stor^e medium 101. 

The watermark detection module 1 14 processes the decrypted content data to 
find a watermark with embedded data contained therein. The watecmatk could comprise, for 

5 example, digital rights management data or an identification of the content owner. 

The watermark detection module 1 14 receives instructions fijom the control 
module 120 executing the control logic data on how and where to detect the watemuak. For 
instance, the watermaik detection module 1 14 could be instructed to extract the identification 
of the conteat owner and to feed this information to a display module (not shown). 

10 Alternatively, the watermaric detection module 114 could be instructed to check for a "copy 
never" or "copy no more" indicator and to signal the conditional access module 1 15 if such 
an indicator is foimd. It could also be the case that the control module 120 does not activate 
the watermark detection module 1 14 at all. 

The conditional access module 1 15 is instructed by liie control module 120 on 

1 5 how to regulate access to tiie content data. It could be instructed to enforce a strict no- 
■ copying regime, or to not allow the content to be fed to a digital output, hi that case, the 
conditional access module 115 signals to the signal processing module 116 that only analog 
signals are to be generated and fed to the output 119. The conditional access module 115 
could also be instructed to embed a particular type of watermark in the signals to be fed to the 

20 output 119. 

The signal processing module 1 16 is responsible for transforming the content 
data into signals that can be presented on the output 1 19. This comprises for example 
generating analog audio and/or video signals, but could also comprise embedding watermark 
data into signals, filtering out particular portions of tiie content, generating a trick play 

25 version of the content and so oil The exact signal processing or transformation operations to 
be p^foimed are decided by the control logic data. The control module 120 executing the 
control logic data controls the operations performed by the signal processing module 116. 

The bus encryption module 1 17 aicrypts the audio and/or video signals to be 
presented on the output 119. For example, the host apparatus 110 could engage in an 

30 authentication protocol widi another component of the system 100. As a result of this 

authentication protocol the host i^aratus 110 and the other component share a secret key. 
The content can now be encrypted with the secret key and be presented on the output 1 19 in 
encrypted form. This way, other components that can read &om the output 119 (for example 
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by listening on the bus to which the output 1 19 is connected) cannot gain access to the 
content. 

It is important to note that the processing means 113-117 are all conq>onents 
of the host ^paratus 110 that may be implemented in whole or in part in software. The 
control logic data does not provide the host apparatus 110 with completely new functionality, 
for example an entirely new decryption algorithm. Rather, the control logic data controls the 
operation of the components of the host apparatus 1 1 0 by e.g. activating or not activating 
particular components, indicating what type of data the components should extract and to 
which other components tibiey should supply this data. 

The benej5.ts of this architecture are substantial. On the one haod, all &e 
processing means 113-117 can be implemented in a standardized feshioiL This reduces the 
risk of programming and/or security errors in these means, and provides a fixed basic 
architecture and fimctionality for the host {?>paratus 1 10. On the othar hand, by simply 
writing new control logic data and storing it on a storage medium linked to the storage 
medium together with content data, the host apparatus 110 can be caused to operate in an 
entirely new way. 

For example, a content provider could stored content data on the storage 
medium 101 in encrypted fashion. The control logic data contains mstractions which feed the 
decryption key to the decryption module 113 and to cause the decryption module 1 13 to feed 
the decrypted content data directly to the signal processing module 116. The control logic 
data also contains instructions to indicate to the signal processing module 116 to produce 
low-quality analog output. The other modules in the host apparatus 1 10 are not used at all. 

The same content provider could later decide to implement a coimter-based 
copy protection mechanism. It adds a "Chip-in-disc" to the storage medium 101 and updates 
the iDstructions in the control logic data. The updated instructions now also activate the 
conditional access module 1 15 by calling its built-in "Chip-in-disc" reading functions. The 
conditional access module 115 now reads out the counter stored on the chip 201, checks 
whether the value is larger than zero, and if so signals to the read module 111 that the content 
data may be read out. It also reduces the value of the counter by one. 

The content provider could also have chosen to implement any other copy 
protection scheme, as long as the conditional access module 115 contains tiie necessary 
functions. It then only needs to write the qjpropriate instmctions in the control logic data, 
and it can trust that the host apparatus 110 will execute them. 
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It should be noted that the above-mentioned embodiments illustrate rather than 
limit the invention, and that those skilled in the art will be able to design many alternative 
embodiments without departing from the scope of the appended claims. 

In the claims, any reference signs placed between parentheses shall not be 
construed as limiting the claim. The word "comprising" does not exclude the presence of 
elements or steps ollia: than tiiose listed m a claim. The word "a" or "an" preceding an 
element does not exclude the pres^ce of a plurality of such elements. The invention can be 
in^lemented by means of hardware conqmsing several distinct elements, and by means of a 
suitably programmed computer. 

In the device claim enumerating several means, several of tidese means can be 
embodied by one and the same item of hardware. The mere fact that certain measures are 
recited in mutually different dependent claims does not indicate that a combination of these 
measures cannot be used to advantage. 



wo 03/107342 PCT/ro03/02574 



1 . A system (100) comprising read means (112) for reading content data and 
control logic data fix>m a storage medium (101), the control logic data being uniquely linked 
to the storage mediimi (101), processing means (113-117), coupled to the read means (1 12), 
for processing the content data and feeding the processed content data to an output, and 

5 control means (120), coupled to the read means (1 12), for executing the control logic data 
and for controlling the processing means (113-1 17) in accordance witibi the control logic data 
being executed. 

2. The system (ICQ) of claim I, in which the read means (1 12) are arranged for 
10 reading out variations in a physical parameter of the storage medium (101), said vaiiadons 

exhibiting a modulation pattern representing a necessary parameter for obtaining access to 
the control logic data. 

3 . The system (1 00) of claim 2, in which the control logic data is stored 

IS encrypted on fbe storage medium (101), and the necessary parameter comprises a decryption 
key necessary to decrypt the encrypted control logic data. 

4. The system (100) of claim 2, in which the necessary parameter comprises 
authentication data for the control logic data, and the control means (120) are arranged for 

20 verifying the authenticity of the control logic data using the authentication data before 
executing the control logic data. 

5. The Systran (100) of claim 1, in which the storage medium (101) comprises an 
integrated circuit (201) which contains a necessary parameter for obtaining access to the 

25 control logic data, and the read means (1 12) are arranged for reading out the necessary 
parameter from the integrated circuit (201). 



6. The system (100) of claim 5, in which the read means (1 12) are further 

arranged for storing a value of an additional parameter on the integrated circuit (201). 



wo 03/107342 



15 



PCT/IB03/02574 



7. A storage medium (101) comprising content data and control logic data, the 
control logic data being uniquely linked to the storage medium (101). 

8. The stor^e medium (101) of claim 7, comprising an integrated circuit (201) 
which contains a necessary parameter for obtaining access to the control logic data. 

9. The storage medium (101) of claim 7, exhibiting variatioiis in a physical 
parameter of the storage medium (101), said variations exhibiting a modulation pattern 
representing a necessary parameter for obtaining access to the control logic data. 



10. The storage medium (101) of claim 7, comprising an optical storage medium. 
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